Section 1: Introduction and Foundations
|
| M 5-Jan |
Introduction
(slides)
|
|
|
| W 7-Jan |
How to read a paper
(slides)
(Whiteboard photos (thanks Yang!):
1,
2)
|
Paper review due by noon CT!
|
|
| M 12-Jan |
Discussion: end-to-end systems abstraction
(Whiteboard photos (thanks Yang!):
1,
2)
|
|
No required readings.
|
| W 14-Jan |
Foundations: Binaries, Viruses, malware analysis
|
Paper review of "Hiding in the Particles" due by noon CT!
|
- Required readings:
- Optional reading(s):
- Recommended pwn.college challenges
|
| M 19-Jan |
No class (MLK day) |
|
|
Section 2: Malware, Analysis, and Defenses
|
| W 21-Jan |
Moving Target Defenses: Virtual Machines and Automated Diversification
|
|
- Required reading:
- Optional reading(s):
-
SoK: Automated Software
Diversity.
Per Larsen, Andrei Homescu, Stefan Brunthaler, and Michael
Franz.
Oakland 2014.
-
Spotless
Sandboxes: Evading Malware Analysis
Systems using Wear-and-Tear Artifacts.
Najmeh Miramirkhani, Mahathi Priya Appini, Nick Nikiforakis, and
Michalis Polychronakis.
Oakland 2017
-
Survey of Cyber Moving
Targets, Second Edition.
BC Ward, SR Gomez, RW Skowyra, D Bigelow, JN Martin, JW Landry,
and H Okhravi.
(MIT Lincoln Laboratory Technical Report)
|
| M 26-Jan |
Evasive Malware and Automated Analysis
|
Paper review due by noon CT!
|
- Required reading:
- Optional reading(s):
|
| W 28-Jan |
Project Pitches and Discussion
Class canceled due to weather.
|
Submit your 500-word writeup via the submission system. See here.
|
No required readings.
|
| M 2-Feb |
Static and Dynamic Software Analysis, Fuzzing
Evasive malware, dynamic analysis, Project Pitch Discussion
Class shifted due to weather.
|
|
- Required readings:
- Optional reading(s):
|
Section 3: Low Level, Hardware, Kernel, Systems Security
|
| W 4-Feb |
Catch up: Static/Dynamic Analysis
Architectural sidechannels, Hardware Security
|
HW1 due 2/6 at 11:59PM Central
Moved to 6-Feb
|
- Required readings:
- Optional reading(s):
-
Spectre: Exploiting Speculative Execution.
Paul Kocher, Jann Horn, Anders Fogh, Daniel
Genkin, Daniel Gruss, Werner Haas, Mike Hamburg,
Moritz Lipp, Stefan Mangard, Thomas Prescher,
Michael Schwarz, and Yuval Yarom.
Oakland 2019.
-
Meltdown: Reading Kernel
Memory from User Space.
Moritz Lipp, Michael Schwarz, Daniel Gruss, Thomas Prescher,
Werner Haas, Anders Fogh, Jann Horn, Stefan
Mangard, Paul
Kocher, Daniel Genkin, Yuval Yarom, and Mike Hamburg.
Usenix Security 2018.
|
| M 9-Feb |
Kernel rootkits |
|
|
| W 11-Feb |
GPU Security
Architectural side channels, KShot catchup
|
|
|
Section 4: Machine Learning, Large Language Models
|
| M 16-Feb |
GPU Security |
|
|
| W 18-Feb |
Machine Learning, Stealing Models |
Please complete
this poll
by Friday 2/20 for paper presentations!
|
|
| M 23-Feb |
Prompt stealing from LLMs; importance of data. |
|
|
| W 25-Feb |
Machine Learning for Malware Analysis and Beyond |
Paper review due by noon CT!
|
|
| M 2-Mar |
Project Proposal Presentations (day 1) |
Submit your presentation slides and writeup: see here.
|
|
| W 4-Mar |
Project Proposal Presentations (day 2) |
|
|
| M 9-Mar |
No class, Spring break |
|
|
| W 11-Mar |
No class, Spring break |
|
|
| M 16-Mar |
Machine Unlearning |
|
|
Section 5: LLMs, Software Security, Vulnerabilities
|
| W 18-Mar |
LLM-based Software Patching |
|
|
| M 23-Mar |
LLM Fingerprinting |
|
|
| W 25-Mar |
LLM Jailbreaking |
HW2 due at 11:59PM Central on Thursday 3/26
|
|
Section 6: Human Subject Research, Research Ethics
|
| M 30-Mar |
Ethics (of research and security) |
|
- Required Reading:
- Optional reading:
|
| W 1-Apr |
Foundations: human studies |
|
- Required reading:
- Optional readings:
-
Neurological Divide: an fMRI Study of Prose and Code Writing.
Ryan Kruger, Yu Huang, Xinyu Liu, Tyler Santander, Westley Weimer, and Kevin Leach.
In ICSE 2020.
-
Distilling Neural Representations of Data Structure Manipulation using fMRI and fNIRS.
Yu Huang, Xinyu Liu, Ryan Krueger, Tyler Santander, Xiaosu Hun, Kevin Leach, and Westley Weimer.
In ICSE 2019 (ACM Distinguished Paper Award).
|
| M 6-Apr |
Human Subjects and Machine Learning |
Paper review due by noon CT!
|
- Required Reading
- Optional Reading
- DIRE: A Neural Approach to Decompiled Identifier Naming.
Jeremy Lacomis, Pengcheng Yin, Edward J. Schqarts, Miltiadis Allamanis, Claire Le Goues, Graham Neubig, Bogdan Vasilescu.
ASE 2019.
- “Len or index or count, anything but v1”: Predicting Variable Names in
Decompilation Output with Transfer Learning.
Kuntal Kumar Pal, Ati Priya Bajaj, Pratyay Banerjee, Audrey Dutcher, Mutsumi Nakamura,
Zion Leonahenahe Basque, Himanshu Gupta, Saurabh Arjun Sawant, Ujjwala Anantheswaran,
Yan Shoshitaishvili, Adam Doupe, Chitta Baral, Ruoyu Wang.
Oakland 2024.
|
Section 7: Potpourri Topics
|
| W 8-Apr |
Autonomous vehicles |
|
- Required reading:
START: A Framework for Trusted and Resilient Autonomous Vehicles.
Kevin Leach, Christopher Timperley, Kevin Angdtadt, Anh Nguyen-Tuong, Jason Hiser,
Aaron Paulos, Partha Pal, Patrick Hurley, Carl Thomas, Jack W. Davidson, Stephanie Forrest, Claire Le Goues, Westley Weimer.
In ISSRE 2022.
- Optional reading(s):
Selective Symbolic Type-Guided Checkpointing and Restoration for Autonomous Vehicle Repair. By Yu Huang, Kevin Angstadt, Kevin Leach, and Westley Weimer. In APR 2020.
A Comprehensive Study of Autonomous Vehicle Bugs. By Joshua Garcia, Yang Feng, Junjie Shen, Sumaya Almanee, Yuan Xia, and Qi Alfred Chen. In ICSE 2020.
|
| M 13-Apr |
TOR, Bitcoin, and Network Security
|
HW3 due Monday 4/13 at 11:59PM Central
|
- Required reading:
- Optional readings:
-
A
Longitudinal, End-to-End View of the DNSSEC Ecosystem..
Taejoon Chung, Roland van Rijswijk-Deij, Balakrishnan
Chandrasekaran, David Choffnes, Dave Levin, Bruce M. Magggs, Alan
Mislove, and Christo Wilson.
USENIX 2017.
-
Global Measurement of DNS Manipulation.
Paul Pearce, Ben Jones, Frank Li, Roya Ensafi, Nick Feamster, Nick Weaver, and Vern Paxson.
USENIX 2017.
-
Users Get Routed: Traffic Correlation on Tor by Realistic Adversaries.
Aaron Johnson, Chris Wacek, Rob Jansen, Micah Sherr, and Paul Syverson.
CCS 2013.
|
| W 15-Apr |
TBA |
|
|
| M 20-Apr |
Final Project Presentations (day 1) |
Submit your presentation slides and writeup: see here. |
|
| W 22-Apr |
Final Project Presentations (day 2) |
|
|